mcafee network security management vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Exposure of Sensitive Information in McAfee Network Security Management (NSM) before 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

Mcafee Network Security Management

4.3

CVSSv2

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) before 10.1.7.35 and NSM 9.x before 9.2.9.55 may allow an malicious user to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

Mcafee Network Security Management

3.5

CVSSv2

Cross site scripting vulnerability in McAfee Network Security Management (NSM) before 9.1 update 6 Mar 2020 Update allows malicious users to unspecified impact via unspecified vectors.

Mcafee Network Security Manager

3.5

CVSSv2

Cross site scripting vulnerability in McAfee Network Security Management (NSM) before 9.1 update 6 Mar 2020 Update allows malicious users to unspecified impact via unspecified vectors.

Mcafee Network Security Manager

4

CVSSv2

Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to view confidential information via insecure use of RC4 encryption cyphers.

Mcafee Network Security Manager

5

CVSSv2

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to crack user passwords via unsalted hashes.

Mcafee Network Security Manager

6.5

CVSSv2

Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.

Mcafee Network Security Manager

3.5

CVSSv2

Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to inject arbitrary web script or HTML via a URL parameter.

Mcafee Network Security Manager

4.3

CVSSv2

Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows man-in-the-middle malicious users to decrypt messages via an inadequate implementation of SSL.

Mcafee Network Security Manager

7.5

CVSSv2

Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information.

Mcafee Network Security Manager

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook